Some of the parties you may need to notify include:

Local law enforcement: As soon as you realize your business has been the target of a cybersecurity attack, the legal team should notify local law enforcement to report the situation. Time is of the essence, as the sooner the authorities are made aware of the incident, the more effective they can be in stopping it from escalating further. The FBI's state office can also be of assistance if the local police aren't familiar with cyber theft investigations. Law enforcement can also help with the timing of the data breach notification you will send to your customers to ensure it's not obstructing the investigation.
Vendors: If any of your company's vendors or business partners were affected by the data breach – for example, if your business stores or collects customers' personal information like social security or credit card numbers via a third party vendor — legal counsel needs to notify them as soon as possible. This helps ensure they'll monitor their accounts accordingly to watch for any potential fraudulent activity.
Customers: Companies should send valued customers a formal notification of the data breach in the form of an email or letter.

In general, the notification should include the following information:

How and when the breach occurred.
What information was stolen and how it may have been misused.
The steps being taken to address and remedy the situation.
Actions the customer can do to protect their information.
Contact number, email or website customers can visit to learn more.

Remember, the potential damage to your company's reputation is one of the most significant issues a data breach can cause. Properly communicating with customers helps protect your relationships and rebuilds their confidence in your organization.

Jenna Disser of AmTrust Financial. Credit: Courtesy photo

Special Reports /

Why a business data breach response plan matters (and how to create one)

Related Stories

Recommended For You